Hello, Following Setup: I created a User with no privileges and want to allow some commands. I configured: privilege exec level 0 show bgp ipv6 unicast privilege exec level 0 show bgp ipv4 unicast privilege exec level 0 show ip bgp privilege exec level 0 show ip route All commands were accepted by the cli.
I then access the device with the limited user. Those commands work fine: show ip route 1.2.3.4 show ip bgp 1.2.3.4 But the "sh bgp ..." commands fail: Router>show bgp ? all All address families ipv4 Address family ipv6 Address family l2vpn Address family nsap Address family rtfilter Address family vpnv4 Address family vpnv6 Address family Router>show bgp ipv4 ? % Unrecognized command Router>show bgp ipv4 The Config file also does not list the commands. Router#sh running-config | inc privilege exec privilege exec level 0 show bgp privilege exec level 0 show ipv6 route privilege exec level 0 show ipv6 privilege exec level 0 show ip bgp privilege exec level 0 show ip route privilege exec level 0 show ip privilege exec level 0 show Is there some additional config needed or is it some kind of restriction/limitation ? Hardware is Sup2T Software is 15.0(1)SY2 kind regards Rolf _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/